CVE-2024-4872 — Hitachi Energy / MicroSCADA X SYS600

Description (CNA)

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.

Affected (CNA)

Vendor / product	Versions
Hitachi Energy / MicroSCADA X SYS600	affected 10.0 through 10.5; unaffected 10.3 vulnerability patch 2025_01; unaffected 10.4 vulnerability patch 2025_01; unaffected 10.5 vulnerability patch 2025_01
Hitachi Energy / MicroSCADA Pro SYS600	affected 9.4 FP2 HF1 through 9.4 FP2 HF5

CWE

CWE-943

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.